Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jap_n2F1jVD6tDy5ILPStXfWICU.roa
File: jap_n2F1jVD6tDy5ILPStXfWICU.roa (raw, json)
Hash identifier: NlwkzZbRm5ny/XZzG+Ll2BQEwHu/ZWkv1z/CPg/HUFI=
Subject key identifier: 8D:AA:7F:9F:61:75:8D:50:FA:B4:3C:B9:20:B3:D2:B5:77:D6:20:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8061A259
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jap_n2F1jVD6tDy5ILPStXfWICU.roa
Signing time: Mon 02 May 2022 08:13:02 +0000
ROA not before: Mon 02 May 2022 08:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153882201 (0x8061a259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 08:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8daa7f9f61758d50fab43cb920b3d2b577d62025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:69:85:33:5c:01:3f:19:d9:8a:ea:d6:00:
03:f5:f8:6a:6e:4b:42:96:13:19:b0:39:d1:98:fe:
66:11:03:4a:e3:b8:15:0e:ce:eb:dd:40:b2:0c:5d:
40:b5:b7:e9:77:31:68:6d:c1:7e:e6:19:1f:80:f0:
6f:23:83:b6:6e:e8:e4:00:8d:23:79:2e:1f:2f:46:
63:2f:18:54:c5:0c:ee:a1:f3:af:e4:81:1f:fe:43:
a6:11:04:28:4f:2d:5f:37:1d:f6:e8:e0:3c:c1:ba:
18:0c:d9:83:8f:82:38:2f:ab:8a:80:b2:7e:51:f0:
e3:ad:ea:78:9a:7e:c3:42:5a:07:6f:a8:e4:24:83:
65:12:3a:87:39:f7:b7:08:ae:b7:6e:b4:8d:41:7a:
c6:5b:7a:50:f7:c9:79:a9:1d:17:36:de:24:da:f1:
1b:28:fc:10:b7:54:4a:ac:03:a0:c7:03:94:38:17:
d6:98:4e:9f:25:8d:e4:17:f3:4d:f9:46:50:e8:c6:
11:ab:04:85:7c:7a:4e:42:ce:4b:3f:3f:ff:14:37:
36:fc:98:36:bf:f4:1d:23:ca:e4:0c:46:f9:e7:92:
b7:85:64:ae:01:e7:93:0a:40:13:5f:6f:2f:3a:8c:
5f:36:a6:3c:51:1f:9b:7f:f5:fc:2a:3b:7c:4f:77:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:7F:9F:61:75:8D:50:FA:B4:3C:B9:20:B3:D2:B5:77:D6:20:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jap_n2F1jVD6tDy5ILPStXfWICU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2e:69:24:8f:f9:5e:45:09:f5:0e:60:af:6c:da:f9:12:b6:
c2:8a:f3:e3:35:ce:55:8b:a9:55:bd:0e:68:1b:02:7b:78:77:
c4:4d:5f:ee:93:9c:5a:f0:e2:df:8d:b5:a1:7d:71:c9:aa:c0:
42:23:13:c5:0f:89:ac:3e:1a:57:1d:aa:2f:7c:0e:dd:6a:14:
25:98:71:5f:8f:76:9e:5a:da:c9:2f:9e:e0:a0:64:b1:22:5f:
80:a7:23:74:39:b3:ce:e4:0c:a0:18:ad:f5:23:6d:81:f9:c6:
80:67:b8:39:ed:2c:76:35:85:ea:49:a4:9b:6a:56:97:f5:a6:
8a:36:75:9a:c0:66:a4:5a:dc:6a:8e:57:af:84:52:f0:fe:99:
34:a2:60:59:7d:31:28:6c:3c:18:b4:e4:d6:85:65:4d:23:8c:
15:e2:e8:eb:66:41:86:80:fc:32:52:c3:36:50:a1:3b:24:6d:
1c:24:5f:18:2f:3a:58:e7:8f:8b:58:89:6e:94:3b:2b:b3:dc:
f9:84:c6:cf:cb:01:09:3f:23:59:a2:fc:94:0e:42:c0:76:1d:
2b:56:df:91:fb:1b:c4:96:af:e5:42:da:f6:5b:b5:b3:62:4b:
0d:51:78:55:f8:bd:3f:f4:85:c2:f4:9f:7e:f2:ef:7c:83:ef:
41:38:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:13 2025 by rpki-client